I help CISOs and executive teams answer a question most of the industry still avoids:

“What is our cyber risk going to look like in the next 90 days—and what should we do about it?”

I’m the founder of CyberRiskModels.com and President of FISMACS, where I’ve developed a probabilistic forecasting approach that converts cybersecurity from a backward-looking reporting function into a forward-looking business discipline.

My Work Focuses On:

• Translating cyber threats into financial and operational impact
• Measuring control effectiveness under real-world conditions
• Identifying how emerging risks—especially AI-driven attack methods—are changing expected loss

Unlike traditional approaches that rely on static frameworks or maturity scoring, I focus on predictive, business-level risk modeling:

• What attacks are actually increasing right now
• Where controls are losing effectiveness
• How those changes impact executive decision-making

Topics I Speak On

• Why most cyber risk quantification models fail executive decision-making
• Converting qualitative cyber risk into measurable financial exposure
• How AI is rapidly eroding the effectiveness of traditional security controls
• Cyber risk forecasting: what leaders should expect in the next 90 days
• Measuring which controls actually reduce risk vs. just satisfy compliance
• Turning cybersecurity into a business-level forecasting function
• Scenario-based risk modeling for board-level communication

Sectors I Current Support

• Retail & Commercial Banks
• Investment & Wealth Management Firms
• FinTech Platforms
• Hospitals & Health Systems
• Outpatient Clinics
• Law Firms
• Accounting & Audit Firms
• Consulting Firms
• Engineering & Architecture Firms
• State Government Agencies
• County & Municipal Governments